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An electronic device tut 

■ plurality of modes including 

■ memory update mode, 
• noovotstUc memory and 

interface for receiving data 

channel. In one embodiment, 

a » tie -up or timer circuit 
for automatically pricing the 
electronic device in a wireless 
memory u p da te mode. Data 
received by laid wireless 




is stored is the nonvolatile 

memory by the microprocessor in response to receipt of the data white the mien _ 

unit for transmitting update data has a microprocessor, a wireless commurucatioa interface and a memory containing 
communication path is established between the programming unit and the electronic device. A system for oodatirtg 
nonvolatile memory of a plurality of electronic devices be ruder a programming unit and a plurality of electronic devic 
updating data stored in the nonvolatile memories of a plurality of cJecoonic devices includes placing a rprogramnting uni 
ihe plurality ol elecrrorttc devices and activating a wireless update routine in the programming unit. 



ii in memory update mode. A programming 
data stored b a 
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SYSTEM AND METHOD FOR UPDATING A MEMORY IN AN 
ELECTRONIC DEVICE VIA WIRELESS DATA TRANSFER 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The current invention relates generally to wireless telecommunications 
devices and, in particular, to an automated and wireless method for loading data 
into electronic devices which have a wireless interface. 

2. Description of the Related Art 

Modem cellular telephones contain a microcontroller and other circuits 
which perform various functions such as controlling radio circuits, providing a 
user interface and user features through interaction with a display, keypad and 
other phone elements, minimizing power consumption to extend talk and standby 
times, controlling battery charging, and many other functions. A software 
program executed by the microcontroller is stored in a non-volatile memory 
device in the phone, which retains data even when no power is applied to the 
memory. In some phone designs, this memory is a "read only memory", or ROM. 
The data content of a ROM is determined when the ROM is nianufactured. Once 
the manufacturing process for a ROM is complete, the data content of the ROM 
cannot be changed. In other phone rf^ig^^ a "flash" memory is used. The data 
content of a flash memory can be altered electronically. 

Due to the complexity of cellular telephones, manufactured phones 
s contain errors in the microcontroller software. Additionally, 
s often desire upda ted software for existing phones to ob tain new or 
enhanced features. In either case, the software program for the mjcrocontroIleT 
must be changed in phones which have completed and p a s srd all manufacturing 
steps, If the phone uses a ROM to start the program, the phone must be 
disassembled and the ROM module must be replaced with a new module 
containing the desired changes. If the phone uses a flash memory to store the 
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program, in order to update the memory the phone must be physically connected 
to a device capable of loading, or "flashing" new content into the memory. 

In some situations, it is necessary to re-program phones which have been 
assembled and packaged, but which have not yet been shipped to customers. For 
this case, the completed phones reside in the manufacturer's warehouse or 
distribution center, in other situations, changes must be made to phones already 
received by the customer. In such a case, the customer normally returns the 
phones to the manufacturer for re-programming. 

Altering program data in phones which use a ROM is very labor intensive, 
due to the need to unpack the phone (from the shipping package), disassemble 
the phone, remove the old ROM, install the new ROM, re-assemble the phone, 
test and re-pack the phone. For phones that contain a flash memory, the program 
can be changed by connecting a cable from a programming device to the phone, 
thereby eliminating the need to physically replace the memory module. However, 
the labor required is still quite substantial because the phone must be unpacked, 
updated, tested and re-packed. 

Thus, a costly problem exists for cellular phone manufacturers with regard 
to software design and software changes. The cellular telephone market demands 
ever-increasing functionality and feature content (most of which is provided by 
the software), decreasing costs and shorter time to market These demands 
increase the likelihood of software errors and customer requests for software 
changes in existing products. However, the labor required to modify the software 
in phones (even those with flash memories) make s these changes very costly. 

Changes to the data content of non- volatile memories within cellular 
phones is not always confined to the microcontroller software. For example, a 
need may arise to change a factory setting (stored as a digital value within the 
memory), to correct date codes or other data related to manufacturing 
information, or to load data to activate a phone. The problems identified for 
changing the software content of a phone also apply to other types of data stored 



WO 99/03288 W7T/USW1 3047 


WO 99/03288 PCTAJS 98/1 3047 




within the non-volatile memories. 




be programmed. The wireless programmer stores the updated software, revision 




Moreover, the problem of memory updating is not restricted to cellular 




number of the updated software, and (at the end of the re-programming process) a 




telephones, but is common to any electronic device having data or programs 




list of electronic devices by serial number which have been successfully re- 




stored in a nonvolatile memory. 




programmed, and their corresponding software revision levels. 


5 
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In one embodiment, the data communication method between the wireless 








programmer and the electronic device is secured by using an authentication 




SUMMARY OF THE INVENTION 




process to prevent accidental or unauthorized rc-rjrograrnming. 








A method of reprograraming an electronic device includes the steps of 




An electronic device has a wireless communication interface including an 




loading the wireless programmer with appropriate data, including updated 


10 


RF transceiver, a microprocessor and an associated non-volatile memory 


10 


software or data, revision levels and a list of electronic devices to be updated, by 




(hereinafter referred to as a "flash" memory). The data content of the nonvolatile 




serial number, placing the wireless programmer in proximity to the electronic 




memory is partitioned into blocks. Each block can be re-programmed 




device and turning the wireless programmer on for a period of time, and 




independently of each other block. The device also includes a timer circuit 




automatically updating the memory of the electronic device. 




coupled to a battery. The timer circuit is operable to "wake up", or power the 




Once programming is complete, a list of serial numbers of electronic 


15 


device at predetermined intervals (for example, once per day). 


15 


devices which have been successfully updated may be obtained from the wireless 




When the device is awakened by the timer, the microprocessor causes the 




programmer. The same method can be used for devices returned from the field. 




RF unit to scan one or more predetermined channels in search of a carrier 




In one embodiment, the wireless programmer is constructed as a kiosk 




modulated with data. If a carrier is found and the modulation technique, data rate, 




which may be placed in a public area such as a cellular phone showroom. The 




data content, etc. of the received signal meet predetermined requirements, the 




kiosk has a user interface including a touch screen monitor and a credit card 


20 


electronic device examines the data conveyed by the RF carrier and uses the data 


20 


reader, and a compartment for depositing an electronic device to be updated. The 




to re-program specified blocks of the memory. 




user may use the touch screen monitor to select upgrade features to be added to 




A second device, referred to herein as a "wireless programmer" or 




his cellular telephone and place the cellular telephone into the compartment. 




"programming unit", generates a signal for re-programming the memory of an 




where the memory of the telephone is updated automatically and wireless ly. In 




electronic device, and receives and processes confirmation signals from the 




one embodiment, the telephone compartment is a multi-compartmented container 


25 


electronic device. The wireless programmer (which may be a specially 


25 


capable of holding a number of different phones simultaneously. 




configured persona! computer) includes a central processing unit, memory, RF 




Although the re-programming method described above is related to 




transceiver, antenna and various data input/output means (such as a keypad, 




changing the software in an electronic device, it may also be used to change the 




monitor, modem, touch screen display, mouse, bar code reader, etc.). The 




content of data fields in the device corresponding to user settings (such as 




transceiver is used to establish a two-way data link with the electronic device to 
3 
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personal identification codes and emergency numbers) or manufacturing date 




a two-channel embodiment 




codes, or to activate the device. 




FIGURE 6 illustrates how data is exchanged between the wireless 








programmer and an electronic device on the authentication channel. 








FIGURE 6A illustrates how data is exchanged between the wireless 


5 




5 


programmer and an electronic device on the acknowledgment channel. 




BRIEF DESCRIPTION OF THE DRAWINGS 




FIGURES 7, 7 A, 7B, 7C and 7D are flowcharts which iUustrate the 








logical operation of the wireless programmer. 




FIGURE I is a block diagram of a wireless system consisting of a wireless 




FIGURES S, 8 A, SB and SC are flowcharts which illustrate the logical 




programmer and one or more electronic devices. 




operation of an electronic device. 


10 


FIGURE 2 is a block diagram of an electronic device. 


10 






FIGURE 3 illustrates how data is organized in the memory of the 








electronic device. 




DETAILED DESCRIPTION OF THE DRAWINGS 




FIGURE 4 is a block diagram of a wireless programmer. 




A system and method for wireless re-programming of memories in 




FIGURE 4A shows a wireless programmer embodied as a standalone 




electronic devices is described, wherein an electronic device establishes a 


IS 


kiosk. 


15 


wireless, bi-directional data communication path with a wireless programming 




FIGURE 4B shows an internal structure of a wireless programmer/kiosk. 




device. The wireless prograrriining device is referred to herein as a "wireless 




FIGURE 4C shows an exemplary screen display of a wireless 
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programmer/kiosk. 




In this specification, cornmunication paths between the electronic device 




FIGURE 5 A is a block diagram showing an arrangement of logical 




and the wireless programmer are referred to as "channels'* which may be 


20 


channels between a wirrless programmer and an electronic device. ■ 


20 


implemented using any one of a number of physical or logical wireless data 




FIGURE SB shows a frame structure for the Notification Channel. 




communication techniques. For example, the cconrmnricalion paths may based 








upon a frequency division multiplexing system (such as AMPS) whereby one 




Authentication Channel. 




carrier per channel is morm'atrd with data on a continuous basis. Alternatively, a 




FIGURE 5D shows a frame structure for the Data Channel 




time division multiple access (TDMA) system may be used, such as those 




FIGURE 5E is a flow diagram showing the flow of information on the 


25 


described in the D-AMPS, GSM or IS- 136 standards. In a TDMA system, a 




Acknowledgement Channel. 




channel is associated with a specific lime slot on a single RF carrier frequency. 




FIGURE 5F is a (low diagram showing the flow of information on the 




Data for a specific receiver may be sent in one of several time slots, while other 




Authermcatic^Ackwrwiedgemem Channel in a two-channel cmbodimcnL 




time slots may be used on the same carrier for other receivers. 




FIGURE 5G shows a frame structure for the Notification/Data Channel in 
« 
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The wireless link could implement a short-range RF o 
protocol such as MC-Unk. Moreover, the wireless link could comprise a channel 
other than an RF channel, such as an infrared channel or magnetic coupling. 

In still other systems such as code division multiple access (CDMA) 
systems, data may be conveyed to several receivers using only one carrier, with 
the data directed to a specific receiver through modulation with a unique 
spreading code. The particular communication format or standard used is not 
critical to the present invention. Other wireless communication techniques may 
be employed by those skilled in the art to implement the present invention 
without departing from the spirit or scope of the invention. 

Wireless data communication methods typically employ means for bit and 
byte synchronization, error detection or correction, interleaving, etc. to ensure a 
reliable communication link. Such techniques arc well known in the art and are 
described, for example, in the IS-54, and IS-136 Standards published by 
Telecommunications Industry Association. The system of the present invention 
may be advantageously implemented using a communication scheme which 
supports such features. 

Referring now to the accompanying drawings, Figure 1 illustrates a 
system which includes a wireless programmer 200 and one or more electronic 
devices 100. While the wireless programmer 200 is operating within range of the 
electronic devices 100, wireless communication paths are established with each 
electronic device 100 when the devices 1 00 are placed in memory update mode. 
Timers within each device 100 may be employed to automatically turn the device 
1 00 on and place the device in memory update mode, or the device may be placed 
in memory update mode by means of a physical or software selectable switch. If 
certain conditions are satisfied as described in detail below, the memory content 
of the device 100 will be altered as a result of the communication between the 
device 100 and the wireless programmer 200. 

The system and method described herein is particularly advantageous for a 
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number of applications. The first is in reprogramming the memories of devices 
which have been manufactured and packaged, but which for some reason contain 
errors in their stored program code or which contain an operational parameter that 
is incorrect or otherwise needs to be changed. A wireless programmer 200 is 

5 placed in proximity to a-group of devices to be updated and a wireless update 
routine or program is commenced within the wireless programmer 200. The 
wireless programmer then begins to continuously broadcast update information. 
As each device 1 00 automatically powers on and is placed in memory update 
mode, it searches for a wireless communication channel containing update 

10 information. Once the communication channel is found, the wireless device 100 
receives the update information and stores it in nonvolatile memory. The wireless 
device then powers down. As the wireless programmer is transmitting update 
information to the wireless devices 100, the wireless programmer is also 
receiving acknowledgement signals from the devices 100 which have been 

15 successfully updated. In this manner, the wireless programmer 200 can maintain 
a record of which devices 1 00 have been successfully updated. Thus, a batch of 
devices may be updated without having to unpack and repack each device. 

In another embodiment, the system of the present invention may be used 
to efficiently and easily update the memory of a device 100 which has already 

20 been distributed to an end user. For example, an end user wishing to upgrade the 
software in his device may return the device 1 00 to the manufacturer or dealer, 
who then updates the device using the methods described herein. 

Yet nnother application of the present invention is an a standalone kiosk, 
such as is commonly found in retail establishments. When a wireless 

23 programmer 200 is configured as a kiosk, as is described in more detail below, 
the wireless programmer 200 may be operated by the user to quickly and 
efficiently update or upgrade the device, eliminating the need for the user to send 
the device back to the manufacturer or distributor. 

Other uses and applications of the present invention will be apparent to 



those skilled in the art 
electronic devices. 



seeking improved methods of updating memories in 



Wireless Electronic Device Configuration 

5 Figure 2 illustrates a block diagram of an electronic device 100 according 

to the present invention. In a preferred embodiment, electronic device 100 is a 
cellular telephone. The principles of the present invention are particularly suited 
for use in updating memories in small hand-held portable telephones. However, 
the present invention may be used to update the memory of any type of electronic 

10 device which contains an electrically alterable memory and a wireless 

communication interface, such as a pager or a laptop computer equipped with a 
wireless modem. 

An electronic device 100 of the present invention includes a wireless 
communication interface 19S. In the embodiment illustrated in Figure 2, wireless 

15 communication interface 195 includes an RF transceiver having a transmitter 1 14 
and a receiver 115 which are coupled to a common antenna 1 1 8. The transmitter 
and receiver circuits 1 14, 115 are controlled by a microcontroller 120 that may be 
one of a variety of commonly available microcontrollers. In other embodiments, 
wireless communication interface 195 may include an infrared communication 

20 unit or other wireless communication device. 

Audio signals for transmission or audio signals thai have been received 
pass through the audio processing circuit 122. Audio processing circuit 122 
converts the received audio signals to signals suitable for broadcast over speaker 
124 and converts the electrical signals from the microphone 126 to signals 

25 suitable for transmission by transmitter circuit 1 1 4. 

The microcontroller 120 also controls the display 1 27 for the device 100 
and receives input signals from the keypad 132. System connector 180 provides 
an electrical interface which is used by electronic device 1 00 to input or output 
data and/or other signals. System connector 1 80 can be used to update the 
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memory in the device using standard, wire-based methods, as are well known in 
the art 

Nonvolatile memory 136, which is capable of storing data even if power is 
not applied to the memory, may include an electrically erasable programmable 
read only memory (EEPROM) module, a static ram (SRAM) module with battery 
backup, or any other type of nonvolatile digital memory. Moreover, nonvolatile 
memory 1 36 could comprise any other type of nonvolatile digital storage means, 
such as a magnetic disk or tape. 

In an exemplary embodiment shown in Figure 2, nonvolatile memory 136 
comprises an EEPROM module. A software program resides in area 1 35 of 
memory 136, while data resides in area 134. Microcontroller 120 can fetch and 
execute instructions which reside in memory 1 36. Furthermore, the memory 
contents can be altered cither on a byte-by-byte basis, or in blocks of bytes. 

Referring to Figure 3, a memory partitioning arrangement for the 
embodiment where the contents of memory 1 36 can be altered in blocks is 
illustrated. Memory 136 is logically divided into a plurality of N blocks 305, 
each of which can be altered without disturbing other blocks of the memory. 
Given that each block of data may include a large number of bytes, each block 
305 may be further divided logically into sub-blocks 31 5 to facilitate re-writing 
the data contents. The use of sub-blocks 315 for memory updating is described in 
greater detail below. Blocks 305 may be individually numbered for reference or 
may be identified by their respective h ex ad e cimal addresses in memory. 

In the case where electronic device 100 is a cellular telephone, nonvolatile 
memory 1 36 additionally stores a number of operating parameters and user 
settings for the device 100. Among the stored parameters isa 32-bit binary 
Electronic Serial Number (ESN). In a typical cellular telephone system, each 
cellular telephone has a unique ESN which is used to identify the particular 
cellular telephone and its manufacturer. 

Referring again to Figure 2. electronic device 100 additionally includes a 
to 
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random access memory (RAM) 1 38. The data content of RAM 138 is volatile. 
That is, the contents of RAM 138 arc lost if power ceases to be applied to RAM 
1 38. RAM 1 38 is used to store temporary data values, and can also be used to 
store a software program for execution by microcontroller 120. 

5 Electrical current required to operate the components of electronic device 

100 is provided by a battery 101 . The battery 101 is connected to most compo- 
nents of the device 100 via switch 142. A regulator 160 connected to the battery 
through switch 142 provides a constant voltage (Vcc) to the other electrical 
components in the device, except for the wake-up circuit 190. When switch 142 

10 is open, the battery 101 is disconnected from most of the circuits within the 

device, with the exception of the wake-up circuit 1 90 (which is always coupled to 
the battery 101). 

Wake-Up Circuit Operation 

15 The wake-up circuit 1 90 will now be described with reference to Figure 2. 

For the following circuit description, "set" or "high" refers to a logic level that is 
the higher of two valid digital output states, "reset" or "low" refers to a logic level 
that is the lower of two valid digital output states. 

Wake-up circuit 190 includes counter 150, oscillator 151, resistors 152 

20 and 153 and diodes 154, 155, 156 and 157. 

Oscillator 1 5 1 provides a clock signal for counter 1 50. Counter 1 50 has a 
clock input, a load input 150a and an output 1 50b. The design of digital counters 
such as counter 1 50 is very well known in the art. Counter 1 50 is loaded with a 
counter initialization value when the load input line is strobed. The counter 

25 initialization value may be hard wired into counter 1 50, or it may be loaded at 
data input J 50c by microcontroller 120. 

Each clock pulse received from oscillator 151 causes the counter value to 
decrease by one. When the counter value equals zero, two actions occur: First, 
clock pulses from the oscillator are inhibited from clocking the counter, thereby 
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high, the control voltage to switch 142 is high, causing switch 142 to close. 
Diodes 156 and 157 prevent potentially damaging voltage from being applied to 
microcontroller 120 outputs when no power is applied to the microcontroller 120. 
Device 100 also includes a switch 143 and a clamp 161 for enabling the 

5 user to power the device 1 00 on and off Switch 1 43 is a normally open, 

momentary contact switch which is activated by the user to turn the device 100 on 
and off. Clamp 161 has an input 161a and an output 161b. Clamp 161, the 
design of which is well known in the art, has the following characteristics: The 
output voltage of the clamp is equal to the input voltage for all input voltages 

10 between 0 volts and Vcc volts. The output voltage equals Vcc volts whenever the 
input voltage is greater than Vcc. Clamp 161 prevents damage to the 
microcontroller 1 20 by preventing voltages in excess of Vcc from being applied 
to the microcontroller. Input 161a of clamp 161 is coupled to switch 143. Output 
1 61b of clamp 161 is coupled to input 120a of microcontroller 120. 

15 When the device 100 is first powered on, the microcontroller 120 

determines whether the device was powered on by the user or by the timer circuit 
190 by testing the output voltage of clamp 161. If the clamp 161 output voltage 
is high, then switch 143 was closed, indicating that the device 100 was powered 
on by the user. If the clamp 1 61 output voltage is low, the device 100 was 

20 powered on by the operation of timer circuit 190. 

While the device 100 b on, the microcontroller output to diode 157 is set, 
thereby setting the counter load input 150a. While the load input 1 50a is set 
(which, for this case, is the duration of time the phone is on), the counter 150 b 
inhibited from counting and b loaded with the initiaUzzrion value, as described 

25 above. 

When power b removed from miaocorttroOer 120, the input to diode 1 57 
becomes low. resetting the load input 1 50a to counter 1 50. This enables the 
counter 1 50 to operate, counting down from the initialization value loaded into 
the counter 1 50 when the load input i 50a was set. 
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stopping the counting process, and second, the counter output 150b is set. The 
counter output 1 50b is reset for any non-zero counter value. 

When the load input 1 50a b high, the counting process is inhibited and the 
counter is loaded with a non-zero value (the counter initialization value). Counter 

5 1 50 operates (counts) when the load input 1 50a is low and the counter value is not 
equal to zero. After the load input 1 50a changes from high to low, the time 
required for the counter value to reach zero b based upon die actual value loaded 
into the counter and the oscillation frequency of the oscillator 151. In practice, 
these values will be selected to produce a desired wake-up interval. For example, 

10 if the desired wake-up interval b every 24 hours and the oscillator frequency is 1 
kHz, then the counter initialization value will be 86,400,000. 

The desired wake-up interval may be a factory set default value, such as 
24 hours, or may be modified by the user by means of a menu selection. For 
example, if the user knows that the device 100 is to be updated, he can select 

1 5 "Memory Update Mode" from a configuration menu, the effect of which is to 
select a very short wake-up interval (and correspondingly load the counter 1 50 
with a small initialization value) . Once the device 1 00 has been updated, the user 
can return the device to its normal operating mode. 

In another embodiment, the wake-up interval is initally factory set at 24 

20 hours to permit wireless updating of the device at a factory or distribution center 
if necessary. After a predetermined period (such as one month, for example) the 
wireless update feature will be disabled automatically. Then, if the device needs 
to be updated at a later date, it can be placed into Memory Update Mode manually 
by the user or a technician. In yet another embodiment, after an event such as 

25 activation, the update feature is disabled automatically. In still another 

embodiment, the device 100 may be placed direcdy into Memory Update Mode 
by means of a menu or function selection or a switch. 

Diodes 1 54, 1 55, 1 56 and resistor 1 53 are used to create a "logical OR" 
function for controlling switch 142. Whenever the anode of any of these diodes is 
12 
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As described above, while the device 100 b in a powered off-state, the 
counter 1 50 counts down to zero from the counter initialization value. (This 
occurs because the lest circuit 190 b powered directly from the battery 101 and 
the load input 1 50a to the counter 1 50 b low). When counter 1 50 reaches a count 
value of 0, the counting process stops and the counter output 1 50b b set. With 
the output 1 50b set, voltage b applied to the control input 142a of switch 142 
through diode 1 54, causing switch 142 to close. This applies battery voltage to 
regulator 160 which applies power to the microcontroller 120. 

When microcontroller 120 begins instruction execution, it first tests the 
clamp output 161b to determine if switch 143 is closed (indicating power-up 
caused by user input). In this example, switch 143 will not be closed because the 
phone was turned on by the wake-up circuit 190. Microcontroller 120 then sets 
the output to diode 156, which provides a second source of current for resistor 
1 53. Thb action latches device 1 00 in an "on" state. As long as output 1 72 
remains high, the state of switch 143 or counter output has no effect on switch 
142. 

The action by the wake-up circuit 190 to rum the device 100 on places the 
device in a memory update mode (as opposed to a normal mode of operation 
which occurs when the device b turned -on by the user). In memory update mo de, 
program execution branches to a group of instructions which provide 
functionality required to perform wireless transfer of data to the phone. 

In one embodiment, if the user attempts to mm the phone on while a 
counter initiated power-up has occ ur red, the user input b ignored by 

r 120 until all memory re -programming processing is complete. 



Wireless Programmer Configuration 

Figure 4 illustrates a block diagram of a wireless programmer 200. The 
wireless programmer 200 co mmuni ca tes with one or more electronic devices 100 
via a wireless link 10 load binary data and/or program code into the devices 1 00. 
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Wireless programmer 200 includes a microcontroller 230, a memory 240, and an 
RF unit 290. Wireless programmer 200 may include a number of input/output 
devices such as a keyboard 210, a monitor 220, and a printer 250. Wireless 
programmer 200 also includes a data I/O unit 260 which may connect other I/O 
devices such as a touch screen, modem and bar code reader, for example. 

RF Unit 290 includes at least one radio transmitter 270, at least one radio 
receiver 280 and an antenna 240. 

The keyboard 21 0 allows a user to input data and commands. The 
monitor 220 and printer 250 allow the user to receive information from the 
programmer. Data and software programs are stored in the memory 240, which 
may include but are not necessarily limited to RAM, ROM. hard or floppy discs. 
Data input/output devices are used load the programmer 200 with programs, files 
and data. The radio transmitter 270 and receiver 280 arc linked to antenna 240 
and use one or more communication paths to exchange data with electronic 
devices 100. All operations of the wireless programmer 200 are controlled by 
microcontroller 230. 

Wireless programmer 200 is provided with a set of programmed 
instructions stored in memory 240 which comprise a program referred to herein as 
a "wireless update routine" or "wireless update program" which controls the 
logical operation of wireless programmer 200. 

In one embodiment illusrrated in Figure 4A, the wireless programmer 200 
is constructed as a kiosk 205 which may be placed in a public area such as a 
cellular phone showroom. The kiosk 205 has a user interface including a touch 
screen monitor 220, a credit card reader 235, and a bar code scanner 245. Kiosk 
205 also has a compartment 225 for receiving an electronic device 100 to be 
updated. Compartment 225 is covered by a door 226. In one embodiment, the 
compartment 225 is a mulli-compartraented container capable of holding a 
number of different phones simultaneously. For example, Figure 4B illustrates a 
cross-sectional view of kiosk 205 containing a multi-compartmented carousel 225 
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accessible via a door 226. Multiple devices 100 may be contained within 
carousel 225 and updated simultaneously. Carousel 225 rotates about an axis 227 
to permit deposit and removal of a particular device 1 00 through door 226. The 
status of the wireless programmer 200's operation is displayed on monitor 220. 
An exemplary screen display of monitor 220 is shown in Figure 4C, which shows 
the current status of three concurrent wireless update procedures. 

Channel Definitions and Operation 

In one embodiment, four communication channels are defined for 
communication between wireless programmer 200 and an electronic device 100. 
The defined channels, which are illustrated in Figure 5 A, include a Notification 
Channel 455. an Authentication Channel 460, a Data Channel 465 and an 
Acknowledgement Channel 470. The structure and operation of these channels 
are described below. 

1. Notification channel. 

The Notification channel 455 is a one-way communication channel from 
wireless programmer 200 to device 100. Data is sent continuously on this 
channel in a plurality of sequential frames. Each frame contains the following 
fields: 



CIC 


Channel Identification Code (identifying the channel as a 
notification channel). 


RN 


Revision Number of the new software program to be downloaded. 


LOC 


Location (i.e., frequency, time slot, spreading code, etc.) for the 1) 
Authentication channel, 2) Data channel and 3) Acknowledgment 
channel. 


CBN 


Changed Block Numbers - list of block numbers of phone memory 
to be altered. 


16 
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Table I - Notification Channel Frame Structure 

The structure of the Notification channel 455 is illustrated in Figure 5B. 
As illustrated, the wireless programmer 200 continuously transmits a plurality of 
sequential notification frames N; 456, each of which may carry unique update 
notification data. This permits concurrent updating of different electronic devices 
with different update revision levels. For example, notification frame Nl may 
carry notification information for updating a first model of cellular telephones to 
a first revision level, while notification frame N2 carries notification information 
for updating a second model of cellular telephones to a second revision level, and 
so forth. The Notification channel frame may additionally include a field 
containing the electronic serial numbers of all devices to be updated to the 
software revision level specified in the RN field. 

2. Authentication Channel. 

The Authentication Channel 460 is a two-way communication channel 
which provides means for the devices 100 and the wireless programmer 200 to 
exchange authentication information. Data flow on the Authentication Channel 
460 is illustrated in Figure 5 C. and is explained in greater detail below. 

3. Data Channel. 

The Data Channel 465 is a one-way communication channel from the 
wireless programmer 200 to electronic device 100. Data is sent continuously on 
the Data Channel 465 to convey data values for those blocks of memory to be 
altered. The electronic devices 100 receive data bytes to updaie all affected 
blocks within the nonvolatile memory 1 36. Data transmitted on the data channel 
is organized into frames having the following fields: 
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BSS 


Block start sequence (pre-determincd data sequence to indicate the 
beginning of data sequence). 


BN 


Block number 


SBN 


Sub-block number 


DATA 


M data bytes 



Table 2 - Data Channel Frame Structure 

The frame structure of a Data Channel 465 is shown in Figure 5D. As 
illustrated, wireless programmer 200 continuously transmits a series of data 
frames D, 466, each of which comprises each of the fields described in Table 2. 
Depending on how many updates are being performed concurrently by wireless 
programmer 200, there may be multiple Data Channels 465 in operation at any 
one time. 

Multiple data frames may be transmitted on any one Data Channel 465. 
This permits the update of multiple subblocks in a given reprogramming 
operation. For example if a given repro gramming operation includes npHatjng 
five memory subblocks in a particular class of devices 100. the Data Channel 465 
will carry five data frames DI-D5. 

4. Acknowledgment Channel. 

The Acknowledgement Channel 470 is a two-way communication channel 
thai provides means for each device 100 to inform the wireless programmer thai 
all memory blocks have been properly updated. Data flow on the 
Acknowledgement Channel 470 is illustrated in Figure 5E, and is explained in 
greater detail below. 

As stated above, die Notification channel 455 and Data channel 465 
convey data from the wireless programmer 200 to the electronic devices 100; no 
data is returned tn wireless programmer 200 by cry device 100 on these channels. 
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The Authentication channel 460 and Acknowledgment channel 470 are used to 
convey data in both directions. 

In a preferred embodiment, the RF signal transmitted by the wireless 
programmer 200 is consistent with the modulation methods, data rates, coding, 
error detection methods, etc. used by the wireless communication standard for 
which the device 1 00 was designed and programmed. This permits the device 
100 to be updated in accordance with the present invention with no (or very little) 
additional modification required. 

As will be explained in greater detail below, when the device 100 is 
placed in the memory update mode, the device 100 searches for the Notification 
channel 455. When the Notification channel 455 is found, the device 100 reads 
the transmitted information from the Notification channel 455 and continues the 
memory update process by proceeding to (i.e., tuning to) the Authentication 
channel 460 to perform the authentication procedure. If the device 100 
successfully authenticates the wireless programmer 200, it then proceeds to tune 
to the Data channel 465 identified in the LOC field of the Notification channel; if 
not, the device 100 switches off. Device 100 reads the appropriate information 
from the Data channel 465 to update memory. Upon successfully updating 
memory, the device 100 proceeds to tune to the Acknowledgment channel 470 to 
acknowledge successful reprogramming. 

In another embodiment of the present invention illustrated in Figures 5F 
and 5G, only two channels are defined: a one-way Notification/Data Channel 920, 
and a two-way Authentication/Acknowledgement Channel 910. Data flow on the 
Authentication/Acknowledgement Channel 910 is illustrated in Figure 5F. Each 
Authentication request by a device 100 comprises the device's ESN plus an 
Authentication request string AUTH. Upon receipt of an authentication request, 
the wireless programmer 200 responds with the received ESN plus the 
calculated Authentication result R, as described above. 

Acknowledgement on the Authentication/Acknowledgement Channel 910 

19 
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Configure, Transmit, and List. Other commands or options may be included in 
the menu selection. 

If, in step 402, a selection is made, processing continues with step 403. If 
"Configure" is selected, the program branches to point A (Figure 7A) in step 403. 
If 'Transmit" is selected, the program branches to point B (Figure 7B) in step 
404. Finally, if "List" is selected, the program branches to point D (Figure 7D) in 
step 405. If no valid selection is made, the program branches back to block 401 
to redisplay the menu choices and await input 

Referring to Figure 7A, the "configure" selection causes the wireless 
programmer 200 to load update data and programs into memory in preparation for 
a programming operation. In step 410 of Figure 7 A, data filefs) are loaded via the 
data input/output unit 260. The data portion of the file(s) transferred may include, 
without limitation: 

1 . The serial number of each device 100 to be modified (which in the case 
of a cellular telephone, will be a 32-bit ESN). 

2. A data value for each device 100 for use in an authentication process. 
The authentication process ensures that devices 100 respond only to 
memory update signals from a legitimate wireless programmer 200. This 
data value is called an "Authentication Key" or "A-Key". 

3. The software version number of the Dew software to be loaded into the 



4. A definition of the communication channels to be used to c 
with the device 100. 



is performed by the device 100 transmitting an acknowledgement signal to the 
wireless programmer 200 to indicate successful completion of the wireless 
memory update process. The acknowledgement signal comprises the device's 
ESN plus an acknowledgement string ACK_ The wireless programmer 200 then 
responds with the same" acknowledgement string to confirm acknowledgement. 
Similarly, to indicate that the update process failed, the device 100 may transmit a 
failure signal comprising the device's ESN plus a negative acknowledgement 
string, illustrated in Figure 5F as NAK. 

A number of advantages are obtained by defining various 
acknowledgement requests and responses. For example, a system implemented in 
accordance with the present invention may be configured to provide a separate 
• acknowledgement for each subblock of memory successfully updated. 

Figure 5G illustrates the structure of the Notification/Data Channel 920 
which is logically divided into a number of frames 930. One frame is a 
notification frame, while the other frames comprise the data frames. The interna) 
structure of the notification and data frames may be similar to those described 
above in connection with the four-channel embodiment. 

It will be readily apparent to those skilled in the art that many variations 
on the structure, arrangement and protocol of the various channels used in the 
wireless update method described herein are possible without departing from the 
scope of the invention. 

Wireless Programmer Logical Operation 

Figure 7 (in conjunction with Figures 7 A, 7B, 7C and 7D) illustrate 
logical operation of a wireless programmer 200. At the start of execution of the 
wireless update program, the wireless programmer 200 displays a plurality of 
menu selections on the monitor 220 in step 401 . The menu selection comprises 
user commands and options for the operation of wireless programmer 200 such as 
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5. The memory blocks to be updated in each device 100 and the data 
content of each block. 

In step 411, wireless programmer 200 executes an authentication 
algorithm for each device 100 using the A -key to generate an authentication result 
R for each device 100. The computed authentication result R for each device 1 00 
is stored in wireless programmer 200. In one embodiment, the device's A -key is 
used directly as its authentication result In other cases, a complex algorithm 
(such as the well-known the cave algorithm) may be used to generate the 
authentication result R from the A-Key. After step 41 1, the program returns to 
step 401 of Fig. 7 and redisplays the menu selections. 

The "Transmit" selection is used to execute the Transmit routine, which 
alters the memory contents of devices 100. Operation of the wireless programmer 
200 upon selection of the "Transmit" command is described in Fig. 7B. 

The menu selections illustrated in Figure 7 may be used when the wireless 
programmer 200 is under the control of an operator, for example when the 
wireless programmer 200 is used to update devices at a manufacturing plant. If 
the wireless programmer 200 is a kiosk to be used by a consumer, the menu 
selections should be altered accordingly, for example to permit the user to select a 
particular option or upgrade, identify his device by serial number, pay for the 
upgrade using a credit card, etc. 

Referring now to Figure 7B, in step 420, transmission of data on the 
Notification Channel 4S5 is initiated, and in step 421, transmission of data on the 
Data Channel is initiated. 

In step 422, wireless p rogram mer 200 dnrrm'mn if data from a device 
100 has been received on the Authentication Channel 460. If no data has been 
received on the Authentication Channel 460, the Transmit routine proceeds to 
point C of Figure 7C. If data has been received on the Authentication Channel 
460, a test is performed in step 423 to determine if the received data represents a 
22 
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valid ESN. If not, the program jumps to point C of Figure 7C. If a valid ESN has 




Figure 7D provides a flow diagram for the routine executed when the user 




been received; a test is performed in step 424 to determine if the ESN is in the 




selects "List" from the main menu of the wireless programmer 200 in step 405 of 




data file. If not, an authentication string equal to the ESN concatenated with '0' 




Fig. 7. Referring to Fig. 7D, a list is displayed in step 440 which includes the 




is transmitted on the Authentication channel 460 in step 426 and then the program 




ESN for all devices 100 for which an acknowledgment was received. In step 44 1 , 


5 


proceeds to point C. 


5 


a list is displayed which includes all devices 100 in the database which did not 




If the ESN is in the data file, a test is made in step 425 to determine if an 




provide an acknowledgment. After step 441, the program returns to step 401 of 




acknowledgment has already been received for the ESN. If so, the device 100 




Fig. 7 to redisplay the menu selections. 




need not continue (since the data has already been altered successfully). 




Figure 6 illustrates more clearly the data exchanged between a device 100 




Therefore, the program goes to step 426 to transmit a data string equal to the ESN 




and the wireless programmer 200 on the Authentication Channel 460 to 


10 


concatenated with '0'. Upon receipt of this data suing, the device 1 00 powers 


10 


authenticate the wireless programmer 200. On the Authentication Channel 460, a 




off. 




first device 100 initiates communication by transmitting an authentication request 




If an acknowledgment has not already been received, then a data string 




comprising its ESN (denoted ESN 1 ) to the wireless programmer 200. When 




equal to the ESN concatenated with the calculated authentication result R is 




received by the wireless programmer 200, ESN1 is used to search a database of 




transmitted. 




ESN's installed in the wireless programmer 200 during configuration. If found in 


15 


At point C (step 428 of Figure 7C), processing by the wireless 


15 


the database, the previously calculated authentication result R corresponding to 




programmer 200 for the Acknowledgment Channel 470 is carried out. 




the received ESN is fetched. If ESN I is not found in the database, an invalid 




At step 428 of Figure 7C, a test is made to determine if data has been 




authentication result (e.g., zero) is used. For either case, an Authentication string 




received on the Acknowledgment Channel 470. If no data has been received on 




comprising the ESN concatenated with Authentication result R is transmitted by 




the Acknowledgement Channel, then the routine proceeds to step 433. If data has 




wireless programmer 200 to device 100 as an authentication response. 


20 


been received, a test is made in step 429 to determine if the received data ' 


20 


When the authentication string is received by the device 100, the 




represents a valid ESN. If not, then the routine proceeds to step 433. 




authentication result R is compared to the authentication result computed by the 




If the received data does represent a valid ESN, then, in step 430, the ESN 




device 100. If the two numbers match, the wireless programmer 200 has been 




is transmitted on the Acknowledgment Channel 470. In step 43 1 , a test is made 




authenticated and the device 100 proceeds with the memory- update process by 




to determine if the ESN is in the database. If yes, the database is updated to 




tuning to the Data channel. If the numbers do not match, the device 100 powers 


25 


indicate that an acknowledgment was received for that ESN. In step 433, a test is 


25 


down and docs not continue the memory update process. 




made to determine if the escape key was pressed. If yes, then the program (in 




Figure 6 illustrates a case where the ESN's sent by two devices 100 




step 434) stops data transmission on the notification and data channels and returns 




partially overlap. In this case, the data received by the wireless programmer 200 




to start. If no, the program jumps to point B of Figure 7B. 




will be corrupted; the wireless programmer will make no response to the 
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corrupted ESN. Each device 100 will then wait a random time period and try 

24 




WO 99/03288 PCT71IS98/I3M7 








again to authenticate the wireless programmer 200. The random delay period 




Electronic Device Logical Operation 




may be based on the ESN of the device 1 00. For example, it may be generated 




Figure 8. along with figures 8A, 8B and 8C provide a flowchart for the 




using a random number generation algorithm seeded with a portion of the 




wireless update program executed in a device 100. Referring to Fig. 8, the 




device's ESN. 




program starts at power up in step 801 . In step 801, a test is made to determine if 


5 


Figure 5E illustrates the data exchanged between a device 100 and the 


5 


the device 100 was powered- up by user action (as described above). If the device 




wireless programmer 200 on the Acknowledgment Channel 470. As illustrated in 




100 was powered on by the user, the device 100 is latched on On step 802) and a 




Fig. 5E, the device 100 initiates communication on the acknowledgement channel 




test is made to determine if a valid software revision number is stored in memory 




with wireless programmer 200 by transmitting its ESN (ESN 1) to the wireless 




(in step 803). If a valid software revision number is not present, then an error 




programmer 200. 




condition is shown in the display 127 and program execution stops. Otherwise, 


to 


When wireless programmer 200 receives an ESN on the 


to 


processing continues to provide normal operation for the user. 




Acknowledgement Channel 470 (constituting an acknowledgement request), it 




If the device 100 was not turned on by user action but instead was turned 




searches the previously described ESN database. If the received ESN is not found 




on by the timer circuit 190, the program proceeds tastep 805, where the device 




in the ESN database, no action is taken by the wireless programmer 200. If the 




100 is latched on. 




ESN is found in the database, the database entry for that ESN is updated to 




In steps 806 through 8 1 0, the device 1 00 searches available 


15 


indicate that the phone has successfully updated memory. The database is also 


15 


communication paths for a notification channel. (As described above, the 




revised to reflect the updated revision level of software in the updated device 100. 




Notification Channel 455 contains a field which identifies it as a notification 




The wireless programmer 200 then transmits an acknowledgement 




channel). Beginning with a first possible communication channel (step 806) ail 




response containing the received ESN to the device 100. When the device 100 




channels are tested until either no notification channels are found (and the device 




receives the acknowledgement response containing its ESN from the wireless 




1 00 turns off) or a notification channel is found. If a notification channel is 


20 


programmer 200, the device 1 00 powers off. Preferably, the device 1 00 will 


20 


found, processing continues with step 81 1. 




make several acknowledgement attempts on the Acknowledgment Channel 400 if 




In step 81 1, the following data from the data channel is stored in RAM: 




its ESN is not received from the wireless programmer 200. 




A. Revision number of the new software program to be 




Figure 6A illustrates a case where the ESN's sent by two devices 100 on 




downloaded. 




the Acknowledgement Channel 470 partially overlap. In such a case, the data 




B. Location (Le., frequency, time slot, spreading code, etc.) for the 


25 


received by the wireless programmer 200 will be corrupted, and the wireless 


25 


authentication channel, data channel and acknowledgment channel. 




programme: 200 will make no response on the Acknowledgement Channel 470. 




C List of block numbers of memory to be altered. 




Each device 100 will then implement a time-out and try again. 




In step 812, the list of block numbers or memory to be altered (received 








from the notification channel) is compared to a list of restricted blocks; if any 








restricted blocks are in the list from the notification channel, the device 1 00 is 
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turned off. Otherwise, processing continues at point A in figure 8A. 

In step 8 1 5 of figure 8 A, the device 1 00 computes and stores the 
authentication result R using the device's prestored A-key. 

In steps 816 through 823, the device 1 00 attempts to communicate with 
the wireless programmer 200 on the Authentication Channel 460 as follows: A 
first timer is started in the device 100 in step 816. The starting value of the timer 
is random, which creates a random delay before communications are attempted. 
After the timer has expired (step 817), the device 100 transmits its ESN on the 
Authentication Channel 460 (step 8 1 8). In steps 819, 820 and 821 , the device 100 
waits a pre-determined period of lime (as controlled by a second timer) for a 
response from the wireless programmer 200. If no response is received within the 
second time-out period, the program proceeds to step 822. If a response is 
received, (he program proceeds to step 823. 

In step 822, a test is made to determine if the maximum number of 
attempts to authenticate have been exceeded. If not. the program returns to step 
8 16 to make another attempt. If a previous authentication attempt failed due to a 
data collision with another device 100 (i.e. two or more devices 100 have sent 
data on the Authentication Channel 460 at the same time), the random delay 
caused by the random timer in step 816 will tend to prevent additional collisions 
with the same devices 100. If the maximum number of attempts has been 
exceeded, the device 100 turns itself off in step 824. 

In step 823, the device 100 checks if the received authentication result R 
matches its computed authentication result. If not, the phone turns itself off in 
step 824. If the authentication results match, the wireless programmer has been 
authenticated and the program proceeds to point B in figure 8B. 

At point B (step 840 of figure 8B), the Data Channel 465 is acquired. In 
subsequent steps, the data from the Data Channel 465 is used to update the flash 
memory block by block. In step 841 , a test is made to determine if the channel 
tuned contains an identifier which indicates that it is indeed the data channel. If 



not, the device 100 is turned off in step 842. If yes, the software revision number 
(which is either located within a data location in the flash or in another non- 
volatile memory) is set to an invalid number (in step 843). In step 853, the 
program used to write or read data to flash is copied from the flash and replicated 
in RAM. In step 844, the received data stream is monitored until data is received 
which indicates the beginning of a data string for any block/sub-block. A test is 
then made (in step 845) to determine if the data string for that sub-block has 
already been updated in flash. If yes, the program returns to step 844 to await 
data for the next sub-block. If no, then subsequent steps are executed to store the 
data string in RAM and use it to update flash, as described below. 

In step 846, the block numbcr/sub-block number and data string for the 
sub-block are stored in RAM. In step 847, the data string is loaded into the sub- 
block of the flash. In step 848, the data just stored in the flash sub-block is read 
from flash and compared to the data in RAM (in step 849). If the comparison is 
not successful, the program returns to step 844. If successful, data is stored in 
RAM which records the sub-block number and block number which was 
successfully updated (in step 850). In step 85 1 , a test is made to determine if all 
sub-blocks (for all blocks) have been updated. If no, the program rcrums to step 
844. If yes, the software revision number is updated with the new value. 

Any programming steps referenced above which read or write data to 
flash (steps 847, 848) are preferably executed from RAM. 

After step 852, processing continues at point C of Figure BC. In Figure 
8C, the device 100 attempts to communicate with the wireless programmer 200 
on the Acknowledgment Channel 470. The acknowledgment channel is tuned in 
step 865. A first timer is started in step 866 which has a starting value which is 
random. This creates a random delay before communications are attempted. 
After the timer has expired (step 867), the device 100 transmits its ESN on the 
Acknowledgment Channel (step 868). In steps 869, 870 and 871, the device 100 
waits a pre-determined period of time (as controlled by a second timer) for a 
28 
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response from the wireless programmer 200. If no response is received within the 
time-out period, the program proceeds to step 872. If a response is received, the 
device 100 is turned off in step 873. 

In step 872, a test is made to determine if the maximum number of 
attempts to acknowledge have been exceeded. If not, the program returns to step 
866 to make another attempt If a previous acknowledgment attempt failed due to 
a data collision with another device 1 00, the random delay caused by the random 
timer in step 866 will tend to prevent additional collisions with the same 
phone(s). If the maximum number of attempts has been exceeded, the device 100 
turns itself off in step 873. 
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cellular telephone The system and method may be used for example at a 
manufacturing plant for simultaneously updating the memories of a number of 
devices, or for updating devices that have already been shipped to consumers one 
at a time. 



Conclusion 



15 The wireless programmer 200 and the device 100 being programmed both 

possess the capability to receive and transmit data via a wireless communication 
link. It would also be possible to employ the concepts presented herein to update 
memory in a device capable only of receiving wireless signals. Modifications 
necessary to utilize the present invention in connection with a receive-only device 

20 will be readily apparent to one skilled in the art upon reviewing this Specification. 
For example, with regard to authentication for a receive -only device, the 
following is one alternative: Continuously broadcast an ESN and Authentication 
result on one channel for all devices being programmed. The wireless device, 
upon receiving its specific ESN awl Authentication result pair would simply 

25 compare the result received with a result stored at time of manufacture to 
authenticate the wireless pro g ram m er. 

A system and method for wirelessly updating the memory of an electronic 
device has been described. The system is particularly advantageous fox updating 
a program or data stored in nonvolatile memory in an electronic device such as a 
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What is claimed is: 

1 . An electronic device, comprising: 

a microprocessor operable in a plurality of modes, said plurality of modes 
including a memory update mode; 

a nonvolatile memory coupled to said microprocessor, and 

a wireless communication interface coupled to said microprocessor for 
receiving data over a wireless communication channel; 

wherein data received by said wireless communication interface is stored 
in said nonvolatile memory by said microprocessor responsive to receipt of said 
data while said microprocessor is in said memory update mode. 

2. An electronic device as recited in claim I , further comprising means for 
placing said electronic device in said memory update mode. 

3. An electronic device as recited in claim 2, wherein said means for placing 
comprises (i) a timer circuit, said timer circuit including a counter having & load 
input, a clock input and an output, said timer further including an oscillator 
having an output connected to the clock input of said counter, and (ii) a switch 
coupled between a battery and said microprocessor, said switch being operably 
controlled by the output of said counter. 

4. An electronic device as recited in claim 3, wherein said counter is loaded 
with a predetermined counter initialization value when the load input of said 
counter is set. 



PCTAJS98/13047 



13. An electronic device as recited in claim 1 , wherein said wireless 
communication interface communicates using a time division multiple access 
protocol. 

5 14. An electronic device as recited in claim 1 , wherein said wireless 
communication interface communicates using a frequency division multiple 
access protocol. 

15. An electronic device as recited in claim 1 , wherein said wireless 

10 communication interface communicates using a code division multiple access 
protocol. 

1 6. An electronic device as recited in claim I : wherein said electronic device 
comprises a cellular telephone. 

15 

1 7. An electronic device as recited in claim 1 , wherein said electronic device 
comprises a pager. 

18. An electronic device as recited in chum 1 . wherein said electronic device 
20 comprises a persona] computer. 

19. An electronic device as recited in claim I , wherein, responsive to said 
microprocessor being placed in said memory update mode, said electronic device 
scans a predetermined list of channels in search of a notification channel 

2S containing a predetermined identification code indicating that a wireless memory 
update is to be performed. 
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5. An electronic device as recited in claim 3, wherein said counter is loaded 
with a counter initialization value by said microprocessor when the load input of 
said counter is set. 

5 6. An electronic device as recited in claim 2, wherein said means for. placing 
comprises a mode selection switch for placing said electronic device directly into 
said memory update mode. 

7. An electronic device as recited in claim I , wherein said data stored in said 
10 nonvolatile memory represents executable program code. 

8. An electronic device as recited in claim I , wherein said data stored in said 
nonvolatile memory represents at least one parameter setting for said electronic 



9. An electronic device as recited in claim 1 , wherein said nonvolatile 
memory is logically divided into blocks. 

1 0. An electronic device as recited in claim 9, wherein said blocks are 
20 logically divided into sub-blocks. 

11. An electronic device as recited in claim 1 , wherein said wireless 
communication interface comprises an RF transceiver. 

25 12. An electronic device as recited in claim 1 , wherein said wireless 
communication interface comprises an infrared communication unit. 
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20. An electronic device as recited in claim 1 9, wherein, responsive to said 
electronic device locating said notification channel, said electronic device reads 
data from a data channel. 

5 21. An electronic device as recited in claim 20. wherein said notification 
channel is the same as said data channel. 

22. A system for updating data stored in a nonvolatile memory of an 
electronic device, comprising: 
to (a) a programming unit comprising a first microprocessor, a first 

wireless communication interface and a memory coupled to said first 
microprocessor, said memory containing update data; 
(h) an electronic device comprising: 

(i) a second microprocessor operable in a plurality of modes, said 
15 plurality of modes including a memory update mode, 

(ii) a nonvolatile memory coupled to said second microprocessor, 

and 

' (iii) a second wireless communication interface coupled to said 
second microprocessor for receiving update data from said programming unit, 
20 wherein update data received by said second wireless communication interface is 
stored in said nonvolatile memory by said second microprocessor responsive to 
receipt of said update data while said microprocessor is in said memory update 
mode; and 

25 (c) a wireless communication path between said programming unit 

and said electronic device. 
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23. A system as recited in claim 22, wherein said wireless communication 
path comprises a unidirectional communication channel for communicating data 
from said programming unit to said electronic device and a bidirectional 
communication channel for communicating data between said programming unit 
and said electronic device. 

24. A system as recited in claim 23 , wherein said unidirectional 
communication channel communicates notification data and update data to said 
electronic device, said notification data being repeated in a plurality of 
notification frames and said update data being repeated in a plurality of update 
data frames. 

25. A system as recited in claim 23, wherein each of said plurality of 
notification frames is divided into a plurality of fields including a channel 
identification field and a location field. 

26. A system as recited in claim 23, wherein each of said plurality of update 
data frames is divided into a plurality of fields including a block number field and 
a data field. 

27. A system as recited in claim 23, wherein said bidirectional channel 
communicates authentication and acknowledgement signals between said 
programming unit and said electronic device. 



28. A system as recited in claim 22, wherein said wireless communication 
path comprises first and second unidirectional communication channels for 

35 



PCTAJS98/I3047 



communicating data from said programming unit to said electronic device and 
first and second bidirectional communication channels for communicating data 
between said programming unit and said electronic device. 

29. A system as recited in claim 28, wherein said first unidirectional 
communication channel communicates notification data to said electronic device, 
said notification data being repeated in a plurality of notification frames. 



10 30. A system as recited in claim 28. wherein said second unidirectional 

communication channel communicates update data to said electronic device, said 
update data being repeated in a plurality of update data frames. 

31. A system as recited in claim 29, wherein each of said plurality of 
15 notification frames is divided into a plurality of fields including a channel 

identification field and a location field. 

32. A system as recited in claim 30, wherein each of said plurality of update 
data frames is divided into a plurality of fields including a block number field and 

20 a data field. 

33. A system as recited in claim 28, wherein said first bidirectional channel 
communicates authentication signals between said programming unit and said 
electronic device. 
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34. A system as recited in claim 28, wherein said second bidirectional channel 
communicates acknowledgement signals between said programming unit and said 
electronic device. 

35. A system as recited in claim 22, further comprising a plurality of 
electronic devices. 

36. A programming unit comprising: 
a microprocessor, 

a wireless communication interface; and 

a memory coupled to said first microprocessor, said memory containing 
update data for updating the memory of one or more electronic devices; 

wherein said programming unit transmits said update data to said one or 
more electronic devices over said wireless communication interface and receives 
signals from said one or more electronic devices acknowledging receipt of said 
update data. 

37. A programming unit comprising: 
a microprocessor, 

a wireless communication interface; 

a memory coupled to said first microprocessor, said memory containing a 
plurality of update data sets for updating the memory of one or more electronic 
devices, said plurality of update data sets corresponding to a plurality of software 
revision levels; and 

means for selecting an update data set corresponding to a desired software 
revision level for a particular electronic device; 
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wherein said programming unit transmits said selected update data set to 
said one or more electronic devices over said wireless communication interface 
and receives signals from said one or more electronic devices acknowledging 
receipt of said update data set. 



38. A programming unit comprising: 



a wireless communication interface, and 

a memory coupled to said first microprocessor, said memory containing a 
plurality of update data sets for updating the memory of one or more electronic 
devices, said plurality of update data sets corresponding to a plurality of software 
revision levels; 

means for selecting an update data set corresponding to a desired software 
revision level for a particular electronic device; and 

means for receiving one or more electronic devices; 

wherein said programming unit transmits said selected update data set to 
said one or more electronic devices over said wireless communication interface 
and receives signals from said one or more electronic devices acknowledging 
receipt of said up d ate data set. 



39. A programming unit as recited in claim 38, wherein said means for 
receiving comprises a multi -compartmented carousel for selectively receiving and 
individually delivering a plurality of electronic devices. 
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40. A programming unit as recited in claim 38, further comprising means for 
displaying the operational status of said programming unit 



41. In a system comprising a programming unit and a plurality of electronic 
devices, said programming unit and said plurality of electronic devices each 
having a microprocessor and a wireless communication interface, each of said 
plurality of electronic devices additionally having a respective nonvolatile 
memory and means for placing said electronic device in a memory update mode, 
a method of updating data stored in the nonvolatile memory of one of said 
plurality of electronic devices, comprising: 

placing said programming unit in proximity to said plurality of electronic 
devices; and 

activating a wireless update routine in said programming unit. 



42. A method as recited in claim 4 1 , further comprising: 
In said programming unit: 

transmitting notification data on a notification channel; 

transmitting update data on a data channel; 

monitoring an authentication channel for the receipt of an authentication 
request; and 

responsive to the receipt of a valid authentication request, monitoring an 
acknowledgement channel for the receipt of an acknowledgement signal from 
said one of said electronic devices; and 
In said one of said plurality of electronic devices: 
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responsive to said electronic device being placed in said memory update 
mode, searching for the notification channel; 

reading data from the notification channel indicative of the location of the 
data channel; 

reading updated data from the data channel; 

storing the updated data in the nonvolatile memory of said one of said 
electronic devices; and 

transmitting an acknowledgement signal on said acknowledgement 
channel. 

43. A method as recited in claim 42, further comprising: 
In said programming unit: 

responsive to receiving an authentication request, selecting an 
authentication string based on a device identification code contained in said 
authentication request; and 

transmitting an authentication response on said authentication channel, 
said authentication response containing said authentication string; and 
In said one of said plurality of electronic devices: 

responsive to locating said notification channel, transmitting an 
authentication request on said authentication channel, said authentication request 
containing a device identification code; 

receiving an authentication response on said authentication channel, said 
authentication response containing an authentication string; and 

determining if said authentication string is correct. 

44. A method as recited in claim 43, further comprising: 
In said one of said plurality of electronic devices: 
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responsive to determining that said received authentication string is 
incorrect, powering off. 

45. A method as recited in claim 42, further comprising: 
In said one of said plurality of electronic devices: 

responsive to an error occurring while reading said update data from said 
data channel, sending a negative acknowledgement on said acknowledgement 
channel and powering off. 

46. A method as recited in claim 42, further comprising: 
In said one of said plurality of electronic devices: 

responsive to an error occurring while storing said update data in the 
nonvolatile memory, sending a negative acknowledgement on said 
acknowledgement channel and powering off. 

47. A method as recited in claim 43, further comprising: 
In said one of said plurality of electronic devices: 

responsive to a failure to receive an authentication response within a 
predetermined time period: 

waiting for a timeout period; and 

rc -transmitting the authentication request. 

48. A method as recited in claim 42. further comprising: 
In said one of said plurality of electronic devices: 

after transmitting (he acknowledgement signal on the acknowledgement 
channel, waiting a predetermined time period to receive an acknowledgemenl 
response; and 
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responsive to a failure to receive an acknowledgement response: 
wailing for a timeout period; and 
re-transmitting the acknowledgement signal. 

5 49. A method as recited in claim 47, wherein said timeout period is a random 
delay. 



50. A method as recited in claim 47, wherein said timeout period is a 
predetermined period based on an identification number unique to said one of 

10 said plurality of electronic devices. 

51. A method as recited in claim 48, wherein said timeout period is a random 
delay. 

15 52. A method as recited in claim 48, wherein said timeout period is z 

predetermined period based on an identification number unique to said one of 
said plurality of electronic devices. 

53. In an electronic device having a microprocessor, a wireless 
20 communication interface, a nonvolatile memory and means for placing said 

electronic device in a memory update mode, a method of updating data stored in 
the nonvolatile memory, comprising: 

responsive to said electronic device being placed in said memory update 
25 mode, searching for a notification channel; 

reading data from the notification channel indicative of the location of a 
data channel; 
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reading updated data from the data channel; 
storing the updated data in the nonvolatile memory of said electronic 
device; and 

transmitting an acknowledgement signal on said acknowledgement 
5 channel. 



54. A method as recited in claim 53, further comprising: 
responsive to locating said notification channel, transmitting an 

authentication request on said authentication channel, said authentication request 
containing a device identification code unique to said electronic device; 

receiving an authentication response on said authentication channel, said 
authentication response containing an authentication string; and 

determining if said authentication suing is correct. 

55. A method as recited in claim 54, further comprising: 
responsive to determining that said received authentication string is 

incorrect, powering off. 

56. In a programming unit having a microprocessor and a wireless 
communication interface, a method of updating data stored in the nonvolatile 
memory of one of a plurality of electronic devices, each of said plurality of 
electronic devices having a microprocessor, a wireless communication interface, a 
respective nonvolatile memory and means for placing said electronic device in a 
memory update mode, the method comprising: 

transmitting notification data on a notification channel; 
transmitting update data on a data channel; 



monitoring an authentication channel for the receipt of an authentication 
request; and 

responsive to the receipt of a valid authentication request, monitoring an 
acknowledgement channel for the receipt of an acknowledgement signal from 
5 said one of said electronic devices. 

57. A method as recited in claim 56, further comprising: 

responsive to receiving an authentication request, selecting an 

authentication suing based on a device identification code contained in said 
to authentication request; and 

transmitting an authentication response on said authentication channel, 

said authentication response containing said authentication string. 
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